Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: LikeBtn Component: Like Button Rating Clear all filters
TI-2024-29653 CVE-2024-44064 · GHSA-8xcv-2xx2-x48c

WordPress Like Button Rating LikeBtn plugin <= 2.6.53 - Reflected Cross Site Scripting (XSS) vulnerability

Priority LOW 30

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LikeBtn Like Button Rating likebtn-like-button.This issue affects Like Button Rating: from n/a through <= 2.6.53.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00182 Published 2024-09-17 No fix listed CWE-79
TI-2022-00656 CVE-2022-0745 · GHSA-84rr-vcc9-5cj4

Like Button Rating < 2.6.45 - Arbitrary e-mail Sending

Priority LOW 30

The Like Button Rating WordPress plugin before 2.6.45 allows any logged-in user, such as subscriber, to send arbitrary e-mails to any recipient, with any subject and body

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00814 Published 2022-06-13 Fixed in 2.6.45 CWE-862
TI-2021-07224 CVE-2021-24945 · GHSA-v7hx-7773-729x

Like Button Rating < 2.6.38 - Unauthorised Vote Export to Email & IP Addresses Disclosure

Priority LOW 36

The Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.38 does not have any authorisation and CSRF checks in the likebtn_export_votes AJAX action, which could allow any authenticated user, such as subscriber, to ge…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00575 Published 2021-12-13 Fixed in 2.6.38 CWE-200